Magic-Mirror/radare2
1
0
Fork 0
mirror of https://github.com/radareorg/radare2.git synced 2024-12-11 23:16:05 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

Do not execute subcommand under simple quotes protection.

Browse Source 
Partially fix:
db/cmd/feat_quote Quotes and substitution - newshell

Signed-off-by: Anthoine Bourgeois <anthoine.bourgeois@gmail.com>
This commit is contained in:
Anthoine Bourgeois 2021-04-13 19:20:27 +02:00 committed by pancake
parent 6a6b8a0e41
commit 41339efd7c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libr/core/cmd.c
View File

@ -3671,7 +3671,7 @@ escape_pipe:
escape_redir:
next2:
/* sub commands */
ptr = strchr (cmd, '`');
ptr = (char *)r_str_firstbut_escape (cmd, '`', "'");
if (ptr) {
if (ptr > cmd) {
char *ch = ptr - 1;
@ -3687,7 +3687,7 @@ next2:
oneline = 0;
empty = true;
}
ptr2 = strchr (ptr + 1, '`');
ptr2 = (char *)r_str_firstbut_escape (ptr + 1, '`', "'");
if (empty) {
/* do nothing */
} else if (!ptr2) {